Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7467eefa-0240-4516-aedb-4a5282c7d102.roa
File:                     7467eefa-0240-4516-aedb-4a5282c7d102.roa (raw, json)
Hash identifier:          L63Ej7EYHKHVjUtbUQhH3LunmauJpfS/KhH2AcmsTZ0=
Subject key identifier:   00:36:4D:EB:E1:00:A4:CA:0D:AF:25:30:69:BF:87:5D:CB:82:97:D3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       66DD559CE0EE3C0F6CFACB410A65D26124A33D59
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7467eefa-0240-4516-aedb-4a5282c7d102.roa
Signing time:             Sat 22 Apr 2023 00:00:00 +0000
ROA not before:           Sat 22 Apr 2023 00:00:00 +0000
ROA not after:            Tue 25 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:dd:55:9c:e0:ee:3c:0f:6c:fa:cb:41:0a:65:d2:61:24:a3:3d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 22 00:00:00 2023 GMT
            Not After : Apr 25 23:59:59 2023 GMT
        Subject: serialNumber=ede49f3c53bfb1431d3db29dad5512d8d0c4bdeca2951fbcd8b02b77a9c51920, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:d6:0e:ec:2c:12:cc:9a:b4:5e:3d:b1:bd:
                    4c:ee:ff:ef:4c:96:5a:6b:78:30:85:ec:c2:e1:84:
                    0f:cf:bf:e5:cb:8e:b0:54:63:74:2c:2c:ee:52:92:
                    5c:10:ed:1c:bc:8c:24:44:cd:4f:57:f7:f2:4c:d6:
                    c9:1a:16:73:b9:37:73:92:f7:cc:33:b0:d7:78:c5:
                    77:53:5c:ab:ab:d6:3d:e0:15:a0:45:f5:3a:5f:56:
                    47:18:98:53:9c:c5:68:be:b2:f4:8f:37:b4:3d:28:
                    a9:ee:85:f5:01:f8:46:a7:63:94:2f:21:85:22:d7:
                    bb:c6:8c:8c:56:67:87:f6:2e:e2:59:a3:21:12:07:
                    c2:89:8b:b8:91:43:19:88:91:3b:13:79:b8:e6:4c:
                    11:0a:52:19:28:59:6f:9b:2c:43:03:12:7f:37:f9:
                    f5:bf:0d:0c:66:e1:db:9d:09:fd:55:75:36:6e:eb:
                    e1:df:ee:52:a4:e0:75:41:bd:b9:c7:2b:f7:a2:8f:
                    dc:04:e7:0f:79:3d:2d:ce:f3:81:48:0b:2a:d4:78:
                    7b:a1:54:e5:93:b2:de:f5:d4:6c:27:fd:8c:db:fe:
                    27:e2:9c:44:d4:0f:f6:1a:f3:39:b1:43:75:d8:17:
                    27:ec:1a:f9:63:a7:be:3b:72:fd:62:b6:90:81:6b:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:36:4D:EB:E1:00:A4:CA:0D:AF:25:30:69:BF:87:5D:CB:82:97:D3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7467eefa-0240-4516-aedb-4a5282c7d102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:8c:78:ca:98:73:f3:a1:27:a8:a4:30:b1:50:4b:18:7e:
         b9:e9:9d:3d:2f:90:c0:a8:8b:aa:28:a2:88:f2:54:4b:b0:ef:
         d0:27:73:0c:72:f4:9b:43:90:11:a3:13:b2:dd:2d:64:12:c6:
         10:69:4d:94:fa:3b:e3:91:fb:3f:d8:27:b8:b4:7c:f4:97:cf:
         a2:a1:57:51:63:4b:59:ce:5e:c6:7e:10:0d:79:d3:29:37:74:
         f5:82:35:98:a5:c1:98:b1:1e:6f:f9:24:f0:3a:5f:73:e0:4d:
         bf:af:08:ce:08:da:71:14:b1:b8:05:94:0a:48:7c:37:36:d3:
         56:ed:8d:6a:7d:6e:ed:49:d1:d5:02:1e:42:65:ed:e0:e7:61:
         92:20:1d:d7:ec:8a:83:97:fa:91:3d:a2:14:0b:a8:32:d3:36:
         38:aa:60:d0:94:0f:fe:2c:be:b8:e0:35:95:bc:04:b6:27:35:
         63:93:04:91:0e:43:95:61:cf:55:ff:42:1f:72:03:71:66:a3:
         ed:0b:a7:c1:ca:9c:b3:26:35:5b:34:11:7d:ec:e2:e2:34:66:
         85:6f:26:7f:ca:7f:2b:7e:38:52:d8:b8:b5:99:f1:d4:90:05:
         9a:fe:1c:c0:cd:77:c5:02:b6:33:03:c4:2d:8a:c8:11:87:1e:
         cb:96:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----